About notifications

The notifications you receive will either be participating notifications or watching notifications. Both types of notifications can be received as web notifications or email notifications. For more information, see:

Tip: If you receive both web and email notifications, you can automatically sync the read or unread status of the notification so that web notifications are automatically marked as read once you've read the corresponding email notification. To enable this sync, your email client must be able to view images from 'notifications@github.com'.

If your repository has a dependency manifest in Ruby or JavaScript (and if you've set up the dependency graph if it's a private repository), whenever GitHub detects a vulnerable dependency in your repository, you will receive a weekly digest email. You can also configure your security alerts as web notifications, individual email notifications, daily email digests, or alerts in the GitHub interface. For more information, see "About security alerts for vulnerable dependencies."